This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
File: fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json)
Hash identifier: C/XzakmAep0uYHjRDoZOnM+KFIZQqA+PBYCTBSc7GNo=
Subject key identifier: C6:70:6F:1E:6C:92:C4:A9:69:63:F9:FB:E5:90:48:E1:3F:1D:CD:FC
Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04
Certificate issuer: /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04
Certificate serial: 0F98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
Manifest number: 1941
Signing time: Sat 06 Dec 2025 17:01:09 +0000
Manifest this update: Sat 06 Dec 2025 17:01:09 +0000
Manifest next update: Sat 13 Dec 2025 17:01:09 +0000
Files and hashes: 1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: QAs3Jp+Wx8q5aR6svtxWGg4fKyPVV1PZeftmpi6BzrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl
rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3992 (0xf98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABF4, serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04
Validity
Not Before: Dec 6 17:01:09 2025 GMT
Not After : Dec 13 17:01:09 2025 GMT
Subject: CN=69346155-d2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:11:38:49:79:4c:45:08:f6:0d:7c:2c:b3:
fe:72:ad:02:54:f5:21:ec:1e:34:1c:85:62:63:81:
b1:31:db:e1:0e:38:cf:16:f0:c7:41:1e:91:60:7a:
a1:df:5d:e0:b6:fd:fd:78:c2:cf:1f:a3:ab:a7:fd:
7b:e4:24:a8:74:a0:9d:ce:8b:62:23:22:77:c8:92:
a7:d5:c3:34:81:7a:64:0e:dc:bd:da:27:f2:06:47:
1c:95:2a:81:bb:b5:30:7e:3e:f9:dc:45:0c:e1:46:
c5:09:85:a3:cc:6a:8c:49:be:27:6d:3c:8b:59:91:
14:05:00:3f:50:55:83:93:e5:5c:11:70:bf:85:c0:
81:7d:71:22:6d:8d:7e:1d:d3:0a:9d:ce:7f:bf:f0:
fe:45:54:21:a8:26:b4:41:29:e9:bb:ad:cf:f2:52:
c0:75:e0:81:17:11:38:ce:d1:55:4a:48:3b:16:3f:
30:3b:07:fe:d2:91:9c:da:50:6f:c4:75:e0:89:4e:
3e:13:fc:bc:5e:8c:4b:bd:e2:27:5e:52:8d:b0:e4:
4d:22:82:26:ff:71:91:5c:31:1d:14:33:51:19:8f:
20:99:10:38:71:fb:81:54:e1:95:8a:42:1b:3a:9d:
92:9d:70:8f:b2:ad:63:00:11:23:d0:bd:14:6d:b1:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:6F:1E:6C:92:C4:A9:69:63:F9:FB:E5:90:48:E1:3F:1D:CD:FC
X509v3 Authority Key Identifier:
keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d4:79:4a:46:13:6f:e5:3b:50:6a:7d:34:1c:ba:0d:b0:ab:
4d:c8:b9:df:3f:3a:dc:2b:ae:05:52:f3:09:82:37:6c:7c:1b:
12:db:83:f3:25:fd:fb:4c:2c:9e:e7:82:5d:a7:00:bb:53:05:
29:73:48:ce:7c:95:9e:5b:04:3d:8f:3a:77:af:61:67:1a:81:
26:ac:d3:8c:b2:a4:9c:12:98:f6:97:87:66:31:51:c4:43:87:
07:2d:fb:12:3c:84:5f:72:49:d5:17:3d:55:9a:fe:c4:d6:d5:
2a:53:cb:af:51:89:5e:db:66:d1:43:2b:f2:9a:5c:20:ed:86:
a3:c2:b9:21:0b:e4:a3:26:4b:96:a0:ff:2a:64:ac:09:0b:57:
9b:ce:b0:8e:c1:3e:92:8f:01:f8:e6:18:06:0f:d7:ac:82:72:
97:c4:62:18:f4:8b:87:9f:38:85:be:68:6f:c1:5f:0b:74:f0:
90:30:8b:5f:5c:f4:44:92:ea:7f:39:99:b0:66:4a:ba:23:bc:
86:26:18:bc:07:e8:ab:79:1b:6d:64:66:b6:20:64:5c:6b:52:
37:9e:91:c0:4d:ba:cd:63:43:44:39:73:68:95:42:4d:79:57:
cd:09:54:93:11:f1:ee:73:ad:f7:50:4c:ca:1d:5e:11:d9:b8:
39:b6:a4:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCRjQxMTAvBgNVBAUTKDdEODMwOUM1RjIyRUYzOEM5RjUyQzlDQjdFM0FGRjU4
NDhFRkJFMDQwHhcNMjUxMjA2MTcwMTA5WhcNMjUxMjEzMTcwMTA5WjAYMRYwFAYD
VQQDEw02OTM0NjE1NS1kMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2dMROEl5TEUI9g18LLP+cq0CVPUh7B40HIViY4GxMdvhDjjPFvDHQR6RYHqh
313gtv39eMLPH6Orp/175CSodKCdzotiIyJ3yJKn1cM0gXpkDty92ifyBkcclSqB
u7Uwfj753EUM4UbFCYWjzGqMSb4nbTyLWZEUBQA/UFWDk+VcEXC/hcCBfXEibY1+
HdMKnc5/v/D+RVQhqCa0QSnpu63P8lLAdeCBFxE4ztFVSkg7Fj8wOwf+0pGc2lBv
xHXgiU4+E/y8XoxLveInXlKNsORNIoIm/3GRXDEdFDNRGY8gmRA4cfuBVOGVikIb
Op2SnXCPsq1jABEj0L0UbbGHTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZwbx5s
ksSpaWP5++WQSOE/Hc38MB8GA1UdIwQYMBaAFH2DCcXyLvOMn1LJy346/1hI774E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy
MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0eWZVc25MZmpyX1dFanZ2
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZZTUp4Zkl1ODR5ZlVzbkxmanJfV0VqdnZnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0
eWZVc25MZmpyX1dFanZ2Z1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB91HlKRhNv5TtQan00HLoNsKtNyLnfPzrcK64FUvMJgjdsfBsS24Pz
Jf37TCye54JdpwC7UwUpc0jOfJWeWwQ9jzp3r2FnGoEmrNOMsqScEpj2l4dmMVHE
Q4cHLfsSPIRfcknVFz1Vmv7E1tUqU8uvUYle22bRQyvymlwg7YajwrkhC+SjJkuW
oP8qZKwJC1ebzrCOwT6SjwH45hgGD9esgnKXxGIY9IuHnziFvmhvwV8LdPCQMItf
XPREkup/OZmwZkq6I7yGJhi8B+ireRttZGa2IGRca1I3npHATbrNY0NEOXNolUJN
eVfNCVSTEfHuc633UEzKHV4R2bg5tqTW
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:30 2025 by rpki-client